Mobile device and method for automatic connectivity, data offloading and roaming between networks

ABSTRACT

Embodiments of a mobile device and methods automatically connecting to a Wi-Fi Hotspot 2.0 are generally described herein. In some embodiments, subscription information for one or more service providers (SP) that operate Wi-Fi networks is stored in a subscription data object of the mobile device. The subscription information includes home service provider information, policy information and pre-provisioned credentials. The mobile device may be configured to determine, without user interaction, if the subscription information is applicable to an available Wi-Fi network and perform without user interaction, an extensible authentication protocol (EAP) based authentication using the pre-provisioned credentials with the available Wi-Fi network to establish a Wi-Fi connection with the available Wi-Fi network. This automatic connectivity may allow a mobile device to roam across Wi-Fi hotspots of Wi-Fi networks and offload traffic to Wi-Fi networks.

RELATED APPLICATION

This is a continuation of U.S. patent application Ser. No. 14/083,028,filed Nov. 18, 2013, which is a continuation of U.S. patent applicationSer. No. 13/173,338, filed Jun. 30, 2011, now issued as U.S. Pat. No.8,590,023, each of which is incorporated herein by reference in itsentirety.

TECHNICAL FIELD

Embodiments pertain to wireless communications. Some embodiments relateto automatic connectivity to wireless fidelity (Wi-Fi) networks androaming across Wi-Fi networks. Some embodiments relate to Hotspot 2.0networks and the Hotspot 2.0 evolution. Some embodiments relate toroaming between cellular and Wi-Fi networks. Some embodiments relate tooffloading traffic from cellular networks to Wi-Fi networks.

BACKGROUND

One issue with connecting to Wi-Fi networks is that it is not a simpleand user-friendly process. A user of a mobile device generally needs todiscover nearby access points, manually surf through a variety ofdifferent service set identifiers (SSIDs) identifying the Wi-Finetworks, select one of the networks, and enter credentials. In manycases, the user must go through several cumbersome web pages, amongother things, to select, associate and authenticate with a Wi-Finetwork. As the user changes location, the user must go through thisprocess again to connect to another Wi-Fi network. This is unlikecellular networks in which mobile devices automatically connect to andhandoff communications across base stations operated by the same serviceprovider as well as connect to and roam across base stations operated bydifferent service providers.

Mobile data usage is growing exponentially and causing capacity andnetwork congestion issues on cellular networks. Thus, cellular operatorsare facing challenges to meet the increasing demand while keeping theiroperating expenses (OPEX) and capital expenditures (CAPEX) low. Thisincreasing demand continues to exceed the ability of cellular networkssatisfy the demand even with the deployment of broadband access cellularnetworks such as third-generation high-speed packet access (3G HSPA),fourth generation long-term evolution (4G LTE) networks and wirelessmicrowave access (WiMAX) networks. Many Wi-Fi networks, on the otherhand, have a very high capacity at very low cost price point.

Thus, there are general needs for improved methods to enable mobiledevices to connect Wi-Fi networks automatically with no userintervention, as well as general needs for mobile devices and methodsfor roaming between Wi-Fi hotspots. There are also general needs formobile devices and improved methods for roaming among Wi-Fi networks andcellular networks. There are also general needs for mobile devices andimproved methods for offloading traffic from cellular networks to Wi-Finetworks.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 illustrates a wireless operating environment in accordance withsome embodiments;

FIG. 2A is a block diagram of a mobile device in accordance with someembodiments;

FIG. 2B illustrates a subscription data object in accordance with someembodiments;

FIG. 3A is a table showing example credential types in accordance withsome embodiments;

FIG. 3B is a table showing some example options for traffic offloadingin accordance with some embodiments; and

FIG. 4 is a flow chart of a procedure for automatic connectivity andtraffic offloading in accordance with some embodiments.

DETAILED DESCRIPTION

The following description and the drawings sufficiently illustratespecific embodiments to enable those skilled in the art to practicethem. Other embodiments may incorporate structural, logical, electrical,process, and other changes. Portions and features of some embodimentsmay be included in, or substituted for, those of other embodiments.Embodiments set forth in the claims encompass all available equivalentsof those claims.

FIG. 1 illustrates a wireless operating environment in accordance withsome embodiments. The wireless operating environment may include amobile device (MD) 102, a plurality of Wi-Fi hotspots 104 (i.e., Wi-Fiaccess networks), and one or more base stations, such as base station106. In the example illustrated in FIG. 1, base station 106 may providecellular network communication services with a geographic region of cell108. As illustrated, the plurality of Wi-Fi hotspots 104 may operatewithin the cell 108. Each of the Wi-Fi hotspots 104 may be operated by aWi-Fi service provider (SP) and may allow the mobile device 102 toconnect to a network such as the Internet 112 and/or route voice anddata communications to other networks including cellular networks, suchas access service network (ASN) 110. One Wi-Fi hotspot 104 may beassociated with a first Wi-Fi network operated by a first serviceprovider while another Wi-Fi hotspot 104 may be associated with a secondWi-Fi network operated by a second service provider. In someembodiments, one Wi-Fi hotspot 104 may be shared by multiple serviceproviders in which the Wi-Fi hotspot 104 is associated with more thanone SSID. In these situations, one SSID, for example, may be assigned toeach of the service provider. If mobile device 102 is a dual modedevice, cellular type communication services of access service network110 may be provided through a set of base stations, such as base station106.

In accordance with embodiments, the mobile device 102 may be configuredfor automatically discovering and connecting to Wi-Fi hotspots 104. Themobile device 102 may also be configured to roam across Wi-Fi hotspots104. In dual-mode embodiments, the mobile device may also be configuredto offload traffic from the cellular network to the available Wi-Finetworks. These embodiments are discussed in more detail below.

In accordance with some embodiments, the mobile device 102 may includesubscription information stored therein for one or more serviceproviders that operate Wi-Fi networks. The subscription information maybe stored in a subscription data object. The subscription informationmay include home service provider information, policy information andpre-provisioned credentials. In these embodiments, the mobile device 102may be configured to determine, without user interaction, if thesubscription information is applicable to an available Wi-Fi network.When the subscription information is applicable to an available Wi-Finetwork, the mobile device 102 may be configured to perform, withoutuser interaction, an authentication protocol, such as an extensibleauthentication protocol (EAP) based authentication, using thepre-provisioned credentials with the available Wi-Fi network toestablish a Wi-Fi connection 103 with the available Wi-Fi network.

In some embodiments, the Wi-Fi hotspot 104 may be a Wi-Fi Hotspot 2.0operating in accordance with a Hotspot 2.0 evolution specification, suchas the Hotspot 2.0 evolution specification of the Wi-Fi Alliance. Themobile device 102 may be a Hotspot 2.0 enabled device and thesubscription information may include pre-provisioned subscriptioninformation for automatic connection to a Wi-Fi Hotspot 2.0. A Wi-Finetwork may be a wireless network including a Wi-Fi hotspot configuredto operate in accordance with one of the IEEE 802.11 standards forwireless local area networks (WLANs). A Wi-Fi network uses acarrier-sense multiple access technique with collision avoidance(CSMA/CA) in which upstream and downstream communications use the samefrequency channels. Cellular networks, on the other hand, such as 4G LTEnetworks and WiMAX networks, implement an OFDMA technique. 3G cellularnetworks may use a CDMA technique.

In these embodiments, a Wi-Fi network may be discovered in apre-associated state and may provide a cellular-like experience thatallows automatic, secure, easy and simplified connectivity for Wi-Fihotspot subscribers. This is unlike current solutions for Wi-Fi hotspotconnectivity, which are proprietary and based on accessing different webpages (e.g., landing pages) requiring user intervention for initiatingconnections.

Embodiments described herein provide mechanisms that simplify Wi-Fihotspot discovery, selection, automatic connectivity and sessionrenewal. In some embodiments described in more detail below, a Wi-Fihotspot 104 may be configured to provide additional information toassist in network discovery and to aid the network selection processbased on user configuration and service provider policy settings.Although a connection to a Wi-Fi network can be established manually bythe user, in accordance with embodiments, a Wi-Fi network connection maybe established automatically based on triggers generated by mechanismssuch as location assistance from the network. This may enhance poweroptimization, among other things. In case of automatic connectionestablishment, a user will not need to re-enter credentials. Theseembodiments are discussed in more detail below.

FIG. 2A is a block diagram of a mobile device in accordance with someembodiments. Mobile device 200 may be suitable for use as mobile device102 (FIG. 1). Mobile device 200 may include physical (PHY) layer andprocessing circuitry 202, memory 204, and network discovery andselection logic 206, among other things. Physical layer and processingcircuitry 202 may be configured for communicating with one or morewireless networks. In the case of a single-mode mobile device, thephysical layer and processing circuitry 202 may be configured forcommunicating with Wi-Fi network.

In the case of a dual-mode mobile device, the physical layer andprocessing circuitry 202 may be configured for communicating with both acellular network and a Wi-Fi network. In dual-mode embodiments, themobile device 200 may include both a Wi-Fi transceiver 222 and one ormore cellular network transceivers 224.

In accordance with embodiments, the memory 204 may store one or moresubscription data objects such as subscription data object 240. Thesubscription data object 240 may store subscription information 241 forone or more service providers that operate Wi-Fi networks. Thesubscription information 241 may include home service providerinformation 242, policy information 244 and pre-provisioned credentials246, among other things.

The network discovery and selection logic 206 may be configured todetermine without user interaction, if the subscription information 241is applicable to an available Wi-Fi network. The network selection logic206 may also be configured to perform, without user interaction, anEAP-based authentication using the pre-provisioned credentials 246 withan available Wi-Fi network to establish a Wi-Fi connection 103 (FIG. 1)with the available Wi-Fi network.

In accordance with some embodiments, the home service providerinformation 242 identifies a home service provider. The home serviceprovider may be the service provider that a user of the mobile device200 has a subscription agreement with and for which credentials arepre-provisioned. In these embodiments, the mobile device 200 may beconfigured to determine, based on the home service provider information242 and the policy information 244, whether the user of the mobiledevice 200 has a subscription agreement with a service provider of anavailable Wi-Fi network (i.e., whether the available Wi-Fi network isoperated by the home service provider), or whether the home serviceprovider has a roaming agreement with the available Wi-Fi network whenthe service provider of the available Wi-Fi network is not the homeservice provider. In this way, automatic connectivity may be achievedwith Wi-Fi hotspots 104 operated by the home service provider as well aswith Wi-Fi hotspots 104 operated by roaming partners of the home serviceprovider.

The following abbreviations may be used herein: Evolved UniversalTerrestrial Radio Access Network (E-UTRAN), Long-Term Evolution (LTE),3rd Generation Partnership Project (3GPP), Worldwide Interoperabilityfor Microwave Access (WiMAX), Wireless Local Area Network (WLAN),Orthogonal Frequency Division Multiplexed (OFDM), Orthogonal FrequencyDivision Multiple Access (OFDMA), Code Division Multiple Access (CDMA),Multiple-Input Multiple Output (MIMO), Multi-User MIMO (MU-MIMO),Single-User MIMO (SU-MIMO), Radio-Access Technology (RAT), Radio-AccessNetwork (RAN), Wireless Fidelity (Wi-Fi), Institute of Electrical andElectronics Engineers (IEEE).

The cellular transceiver 224 may be a 3G CDMA transceiver including a 3Ghigh-speed packet access (HSPA) or GSM/GPRS transceiver, a 4G LTE OFDMAtransceiver, or a WiMAX OFDMA transceiver, although the scope of theembodiments is not limited in this respect. The Wi-Fi transceiver 222may be an OFDM or direct sequence spread spectrum (DSS) transceiverconfigured to implement any of the IEEE 802.11 standards for WLANs andmay have Hotspot 2.0 capability.

The mobile device 200 may also include one or more antennas 201. Theantennas 201 may be internal to mobile device 200. Antennas 201 maycomprise one or more directional or omnidirectional antennas suitablefor transmission of RF signals. In some embodiments, instead of two ormore antennas, a single antenna with multiple apertures may be used. Inthese embodiments, each aperture may be considered a separate antenna.In some multiple-input multiple-output (MIMO) embodiments, antennas 201may be effectively separated to take advantage of spatial diversity andthe different channel characteristics that may result between each ofantennas 201 and the antennas of a transmitting station.

FIG. 2B illustrates the data structure of a subscription data object inaccordance with some embodiments. As discussed above, the subscriptiondata object 240 includes the subscription information 241, which mayinclude the home service provider information 242, the policyinformation 244 and the pre-provisioned credentials 246 for asubscription with a home service provider of one or more Wi-Fi networks.

In some embodiments, when the user of the mobile device 200 has asubscription agreement with more than one service provider, thesubscription data object 240 may include subscription information 241for each service provider. In some other embodiments, when the user ofthe mobile device 200 has a subscription agreement with more than oneservice provider, a separate subscription data object 240 (i.e.,multiple instances of the subscription data object 240) may be includedfor each service provider. In these embodiments, subscriptioninformation 241, home service provider information 242, policyinformation 244 and pre-provisioned credentials 246 may be included foreach service providers.

The home service provider information 242 may identify a friendly nameand a fully-qualified domain name (FQDN). The home service providerinformation 242 may also identify a service provider network accessidentifier (NAI) realm for the home service provider.

The policy information 244 includes a roaming partner list 252indicating the hotspot service providers, if any, that the home serviceprovider has a roaming agreement with. In these embodiments, when thepolicy information 244 indicates that the hotspot service provider of anavailable Wi-Fi network is on the roaming partner list 252, the mobiledevice 200 may use its pre-provisioned credentials 246 to establish aWi-Fi connection 103 with the available Wi-Fi network without any userintervention (i.e., automatically).

For each hotspot service provider on the roaming partner list 252, thesubscription data object 240 may include a FQDN and priorityinformation. The priority information may be used by the mobile device200 when selecting (e.g., to prioritize) between more than one availableWi-Fi network operated by service providers on the roaming partner list.The selection between available Wi-Fi networks may be based onconnection information (i.e., QoS level, bandwidth, etc.).

The policy information 244 may also include a service provider blacklist254 which may indicate the Wi-Fi network service providers or Wi-Fihotspot service providers with which the home service provider does nothave a roaming agreement. The service provider blacklist 254 identifiesthe FQDN for each blacklisted hotspot service provider. In accordancewith embodiments, the mobile device 200 may be configured to refrainfrom establishing a Wi-Fi connection with hotspot service providersidentified in the service provider blacklist 254. The service providerblacklist 254 may be a revocation list of service providers for the homeservice provider for which the home service provider does not wish toestablish any connections.

In accordance with some embodiments, the mobile device 200 may beconfigured to roam from a Wi-Fi hotspot 104 of a currently connectedWi-Fi network to a hotspot of another Wi-Fi network serviced by eitherthe home service provider or a hotspot service provider on the roamingpartner list 252. In these embodiments, the mobile device may refrainfrom roaming to a hotspot operated by a service provider on the serviceprovider blacklist 254.

In some embodiments, the policy information 244 may also include policyparameters that indicate one or more of locations, dates and times forwhich certain subscription information 241 is valid or applicable. Thelocation information may be expressed in geo-location coordinates,expressed using cellular identifiers, or expressed using WLAN locationidentifiers. In some embodiments, the geo-location coordinates mayinclude an anchor latitude and longitude along with a radius to indicatea region within which the policy is valid. In some embodiments, datesand times may be included to indicate start and stop dates/times forwhich a policy is valid.

The cellular identifier may be cellular or cell identifier (CI) receivedfrom a base station (BS) 106 of a cellular network. The WLAN identifiermay be a basic-service set identifier (BSSID), a service-set identifier(SSID), or a Homogeneous Extended Service Set Identifier (HESSID) thatmay be received from a Wi-Fi hotspot 104.

In some embodiments, the pre-provisioned credentials 246 may be unifiedcredentials suitable for EAP-based authentication. In these embodiments,the use of unified credentials may allow a user to connect automaticallyacross different Wi-Fi hotspots that have roaming agreements betweencellular network service providers. This allows for cellular networkservice providers to offload mobile traffic, particular high-bandwidthdata traffic, from cellular or other networks onto a Wi-Fi network fordual mode devices (i.e., device with both cellular network capabilityand Wi-Fi network capability). The use of the common or unifiedcredentials across both cellular and Wi-Fi networks and the unifiedauthentication mechanisms of these embodiments facilitate thisoffloading as well as roaming.

In some embodiments, the pre-provisioned credentials 246 may becertificate-based credentials that may comprise a digital certificatefor EAP-TLS (transport-layer security) authentication. The use ofcertificate-based credentials and EAP-based authentication mechanisms asdescribed herein may adequately secure the Wi-Fi hotspots and may helpprevent the Wi-Fi networks from various attacks.

When the mobile device 200 is a single-mode device (with Wi-Fi networkcapability but without cellular-network capability), the digitalcertificate of the pre-provisioned credentials 246 may be an X.509configured certificate that is based on public/private key pair (i.e.,asymmetric keys). In these embodiments, an X.509 certificate may beconfigured in accordance with the X.509 ITU-T standard for public keyinfrastructure (PKI) for single sign-on (SSO) and Privilege ManagementInfrastructure (PMI). A certification authority (CA) may issue thecertificate which may bind a public key to a particular distinguishedname in the X.500 tradition, or to an alternative name such as an e-mailaddress or a DNS-entry. Unlike conventional Wi-Fi networks, in theseembodiments the use of X.509 certificates may be used as credentials. Inaccordance with some embodiments, single mode devices may use 802.1X andEAP based EAP-Tunneled Transport Layer Security (EAP-TTLS)authentication methods.

When the mobile device 200 is a dual-mode device (a device with bothWi-Fi network capability and cellular-network capability), thepre-provisioned credentials 246 may comprise a subscriber-identitymodule (SIM) (or a universal SIM (USIM)) for either EAP-Authenticationand Key Agreement (EAP-AKA) authentication or EAP-Subscriber IdentityModule (EAP-SIM) authentication. In accordance with these embodiments,dual-mode mobile devices may use common SIM/UICC based credentials forboth Wi-Fi and cellular networks and may use common authenticationmethods (EAP-SIM/EAP-AKA) for both the Wi-Fi and cellular networks. Insome embodiments, the SIM/USIM credentials may be used by UMTS enableddual-mode mobile devices.

In some embodiments, the pre-provisioned credentials 246 may comprise auser name and password for use with server-side certificates. In theseembodiments, either EAP-Tunneled Transport Layer Security (EAP-TTLS) orEAP-Flexible Authentication via Secure Tunneling (EAP-FAST)authentication may be used. Other EAP based authentication methods mayalso be suitable for use for connecting to, offloading and roamingbetween Wi-Fi networks.

The use of these common authentication methods enables, among otherthings, seamless roaming across cellular network and Wi-Fi networksleading to relatively seamless Wi-Fi offloading. These embodiments arediscussed in more detail below.

FIG. 3A is a table showing example credential types in accordance withsome embodiments. Table 300 shows EAP methods 304 for each of thecredential types 302 that may be used by various mobile devices inaccordance with embodiments disclosed herein.

FIG. 3B is a table showing some example options for traffic offloadingin accordance with some embodiments. Table 350 shows current technicaloptions 358 and technical options 360 in accordance with the embodimentsdisclosed herein for each attribute 356 for both single mode devices 352and dual-mode devices 354.

In some embodiments, the mobile device 200 may select a hotspot 104 forinitial connection r based on connection information such as a RSSI,available bandwidth, and/or QoS information or roaming agreements incases involving roaming. In these embodiments, the mobile device 200 mayselect a Wi-Fi hotspot 104 based on the requirements of the applicationsrunning on the device. For example, connection to a hotspot 104 may beperformed when the connection is determined to meet the QoS requirementsof an application running on the device, and will not be performed whenthe connection does not meet the QoS requirements of an applicationrunning on the device.

In these embodiments, a mobile device 200 may be able to roam, not onlyacross hotspots operated by different service providers (that have aroaming agreement with the home service provider), but across thevarious hotspots that may be operated by the home service provider.Furthermore, the mobile device 200 may be able to roam, not only acrossbase stations operated by different cellular network service providers(that have a roaming agreement with a home service provider wirelessnetwork service provider), but across the various base stations that maybe operated by the home service provider cellular network serviceprovider. In some cases, the home service provider cellular networkservice provider (that operates cellular base stations) may be a homeservice provider that operates Wi-Fi networks.

During roaming, there may be both roaming outbound and roaming inboundusers. For roaming users, the visited network may be configured to routethe credentials to the home network and authenticate the user in thehome network.

In some embodiments, single-mode (i.e., Wi-Fi) devices may be able toseamlessly roam across Wi-Fi networks operated by different Wi-Fiservice providers based on standardized roaming agreements. Dual modedevices may be able to roam between Wi-Fi networks operated by Wi-Fiservice providers, and roam between cellular networks operated bydifferent cellular network service providers. In some embodiments, thesubscription data object 241 may specify a list of service providerFQDNs with a priority level associated with each roaming partner.

In some embodiments, a mobile device 200 may be configured to roam froma Wi-Fi hotspot 104 of currently connected Wi-Fi network to a basestation 106 of a cellular network using pre-provisioned credentials forthe cellular network. In these embodiments, the currently connectedWi-Fi network may be providing both voice and data services to themobile device 200 and both the voice and data services may betransferred from the currently connected Wi-Fi network to the cellularnetwork. In these embodiments, the mobile device 200 may use X.509 basedcredentials, discussed below, although this is not a requirement.Accordingly, a mobile device 200 with pre-provisioned credentials mayseamlessly roam between Wi-Fi and cellular networks without userinteraction.

FIG. 4 is a flow chart of a procedure for automatic connectivity andtraffic offloading in accordance with some embodiments. Procedure 400may be performed by a mobile device, such as mobile device 102 (FIG. 1).

In operation 402, the mobile device 102 may be powered on or may wake upfrom a low-power or idle state or sleep mode.

In operation 404, the mobile device may determine its current location.In some embodiments, the mobile device 102 may determine, without userinteraction, its current location based on a geo-location (e.g., GPS), acellular identifier (i.e., received from a base station 106) or a WLANidentifier (received from a Wi-Fi hotspot or Wi-Fi access point).

In operation 406, the mobile device 102 may identify any preferred Wi-Finetworks associated with Wi-Fi hotspots 104 at a current location of themobile device 102. In some embodiments, the mobile device 102 retrievewithout user interaction, a list of one or more preferred Wi-Fi networksavailable at the current location from the subscription data object 240.In these embodiments, the mobile device 102 may generate the list ofpreferred Wi-Fi networks available at different geographic locationsthat were visited by the mobile device 102. In this way, the amount ofscanning for available Wi-Fi networks may be reduced, reducing powerconsumption.

In operation 408, the mobile device 102 may determine if there are anypreferred Wi-Fi hotspots associated with the current location on thelist. When there are preferred Wi-Fi hotspots on the list, operation 414may be performed. When there are no preferred hotspots on the list,operation 410 may be performed.

In operation 410, the mobile device 102 may determine whether it hasbeen to the current location before. In these embodiments, the mobiledevice 102 is configured to maintain a list of geographic locations thatwere visited by the mobile device 102 along with a time/date stamp toindicate when the current location was last visited. Operation 412 maybe performed when it has been to the current location before. Operation414 may be performed when it has not been to the current locationbefore.

As part of operation 410, when the mobile device has been to the currentlocation before, the mobile device may be configured to detect if thereare any Wi-Fi network updates (i.e., since the preferred list is empty).In these embodiments, the mobile device may be configured to detect ifthere are any Wi-Fi network updates after a predetermined period timehas passed based on the time/date stamp associated with the currentlocation. The predetermine period of time as well as the option todetect for Wi-Fi network updates may be user-setting to allow theseoperations to be performed automatically. If the predetermined period oftime has passed, the mobile device may be configured to perform scanningat the current location to determine if there are any available Wi-Finetworks to update the list of preferred Wi-Fi networks available thecurrent location. If there is an available Wi-Fi network, the proceduremay proceed directly to operation 416. If there are no available Wi-Finetwork updates, the procedure may proceed directly to operation 412.

In operation 412, the mobile device 102 may be configured to go to sleepor enter an idle or low power state. In this situation, the mobiledevice has been to the current location before but since there were notpreferred hotspots at that location, the mobile device 102 will refrainfrom attempting to automatically connect to any hotspots.

In operation 414, the mobile device 102 may scan for available Wi-Finetworks.

In operation 416, the mobile device may determine if it ispre-provisioned for automatic connectivity (i.e., has subscriptioninformation 241 in the subscription data object 240). In someembodiments, the mobile device 102 may determine if credentials arepre-provisioned for Wi-Fi hotspot connectivity.

When the mobile device 102 determines that is not pre-provisioned forautomatic connectivity, the mobile device 102 may be configured toperform a subscription provisioning process of operations 422, 424 and426 to generate and store the pre-provisioned subscription informationin the subscription data object 240. In this way, on-line provisioningmay be performed. In these embodiments, the user may choose perform thesubscription provisioning process.

The subscription information 241 may be stored in the mobile device 102by downloading the subscription information 241 in accordance witheither an open-mobile alliance (OMA) device management (DM) (OMA-DM)technique or a Simple Object Access Protocol (SOAP) Extensible MarkupLanguage (XML) (SOAP-XML) technique.

In some embodiments, the subscription provisioning process includesconnecting to a sign-up server in operation 422 and signing up for asubscription agreement with a Wi-Fi network service provider inoperation 424, during which credentials may be provisioned. In theseembodiments, the user may initially select a home service provider, mayselect a service plan based on for example, cost, access restrictions,data requirements, among other things. Accordingly, a user is able tosecurely sign-up on-line for a Wi-Fi service. Credentials and serviceprovider policies are provisioned on the mobile device 102. Devicemanagement mechanisms such as OMA-DM allow certificates and other usercredentials to be provisioned over the air. A secure signup mechanismbased on SOAP-XML using HTTPS based transport allows the user to verifythe authenticity of the online server before providing its owninformation and securely downloading the credentials. In someembodiments, the mobile device 102 may be required to provision publiccertificates to authenticate the root server from the service providerbefore initiating this process.

In operation 418, the mobile device may determine if it has subscriptioninformation 241 in the subscription data object 240 for any one or moreof the available Wi-Fi networks, or if any of the available Wi-Finetworks are on the roaming partner list 252 (FIG. 2B). When the mobiledevice 102 determines that is not pre-provisioned for any of theavailable Wi-Fi networks in operation 418, the mobile device 102 may beconfigured to perform a subscription provisioning process of operations422, 424 and 426.

In operation 420, when the mobile device is pre-provisioned forconnectivity to more than one of the available Wi-Fi networks, themobile device 120 may select a preferred (e.g., highest priority) of theavailable Wi-Fi networks based on priority information in thesubscription data object 240.

In operation 428, the mobile device 102 may automatically perform,without user interaction, an EAP based authentication using thepre-provisioned credentials 246 with a selected one of the availableWi-Fi networks.

In operation 430, a Wi-Fi connection 103 (FIG. 1) may be establishedwith the Wi-Fi hotspot. In some embodiments, the mobile device 102 maybe configured to check if it is a dual-mode device. When it is a dualmode mobile device, operation 432 may be performed.

If the mobile device 102 is a dual-mode mobile device, operation 432 mayinclude offloading traffic from a cellular network to the Wi-Fi networkafter the connection to the Wi-Fi network is established in operation430. In some embodiments, traffic offloading may be based on loadbalancing or other criteria established by the cellular network and maybe initiated by network service provider policies that arepre-configured on the mobile device 102. The user may also initiateoffloading based on user preferences such as better service, QoS orspecific services that may be available on some Wi-Fi networks. Userpreferences for offloading may be stored with the user profiles on thedevice. For example, the user of the mobile device may configure thedevice for traffic offloading for higher-bandwidth operations (e.g.,downloading or uploading information, video streaming, etc.), and mayconfigured to device to refrain from traffic offloading forlower-bandwidth operations such as SMS (short-messing services such astexting) and voice communications.

Although mobile device 200 (FIG. 2) is illustrated as having severalseparate functional elements, one or more of the functional elements maybe combined and may be implemented by combinations ofsoftware-configured elements, such as processing elements includingdigital signal processors (DSPs), and/or other hardware elements. Forexample, some elements may comprise one or more microprocessors, DSPs,application specific integrated circuits (ASICs), radio-frequencyintegrated circuits (RFICs) and combinations of various hardware andlogic circuitry for performing at least the functions described herein.In some embodiments, the functional elements of the mobile device 200may refer to one or more processes operating on one or more processingelements.

Embodiments may be implemented in one or a combination of hardware,firmware and software. Embodiments may also be implemented asinstructions stored on a computer-readable storage device, which may beread and executed by at least one processor to perform the operationsdescribed herein. A computer-readable storage device may include anynon-transitory mechanism for storing information in a form readable by amachine (e.g., a computer). For example, a computer-readable storagedevice may include read-only memory (ROM), random-access memory (RAM),magnetic disk storage media, optical storage media, flash-memorydevices, and other storage devices and media. In some embodiments, themobile device 200 may include one or more processors and may beconfigured with instructions stored on a computer-readable storagedevice.

The Abstract is provided to comply with 37 C.F.R. Section 1.72(b)requiring an abstract that will allow the reader to ascertain the natureand gist of the technical disclosure. It is submitted with theunderstanding that it will not be used to limit or interpret the scopeor meaning of the claims. The following claims are hereby incorporatedinto the detailed description, with each claim standing on its own as aseparate embodiment.

What is claimed is:
 1. A non-transitory computer-readable storage mediumthat stores instructions for execution by one or more processors of adevice, to perform operations comprising: receive a Hotspot 2.0management object, the management object having a hierarchicalstructure, that includes subscription parameters and policy parameters,wherein the subscription parameters further include information for ahome service provider of the device; detect networks available at acurrent location of the device, wherein the networks are public Wi-Finetworks; select a hotspot for connecting to a network of the networksavailable, giving preference to hotspots operated by the home serviceprovider unless a user preference indicates that preference is not to begiven to hotspots operated by the home service provider; automaticallyperform, without user interaction, an extensible authentication protocol(EAP)-based authentication, using a credential type provided in thesubscription parameters, with the selected network of the networksavailable, wherein policy parameters include a roaming partner list thatincludes a priority for indicating an order of preference for a roamingpartner based on connection information, and wherein when the roamingpartner list includes at least two roaming partners, the operationfurther configure the device to select between the at least two roamingpartners based on the priority of each respective roaming partner, andwherein credential data are stored in a separate portion of thehierarchical structure of the management object from the roaming partnerlist; and offload traffic from a cellular network to the selectednetwork in response to authentication of credential data associated withthe selected network.
 2. The non-transitory computer readable medium ofclaim 1, wherein the information for the home service provider includesat least one of a friendly name for the home service provider and afully-qualified domain name (FQDN) for the home service provider.
 3. Thenon-transitory computer-readable storage medium of claim 1, whereinoperations further configure the device to: determine the currentlocation of the device based on at least one of a geo-location, acellular identifier, or an identifier received from the selectednetwork.
 4. A device including one or more processors, the one or moreprocessors including circuitry, the circuitry having logic to: receive aHotspot 2.0 management object, the management object having ahierarchical structure, that includes subscription parameters and policyparameters, wherein the subscription parameters further includeinformation for a home service provider of the device; detect networksavailable at a current location of the device, wherein the networks arepublic Wi-Fi networks; select a hotspot for connecting to a network ofthe networks available, giving preference to hotspots operated by thehome service provider unless a user preference indicates that preferenceis not to be given to hotspots operated by the home service provider;automatically perform, without user interaction, an extensibleauthentication protocol (EAP)-based authentication, using a credentialtype provided in the subscription parameters, with the selected networkof the networks available, and wherein policy parameters include aroaming partner list that includes a priority for indicating an order ofpreference for a roaming partner based on connection information, andwherein when the roaming partner list includes at least two roamingpartners based on the priority of each respective roaming partner, andwherein credential data are stored in a separate portion of thehierarchical structure of the management object from the roaming partnerlist; and offload traffic from a cellular network to the selectednetwork in response to authentication of credential data associated withthe selected network.
 5. The device of claim 4, wherein the informationfor the home service provider includes at least one of a friendly namefor the home service provider and a fully-qualified domain name (FQDN)for the home service provider.
 6. The device of claim 4, wherein thedevice further includes: two or more antennas, and a transceiverconfigured to be coupled to the two or more antennas.
 7. The device ofclaim 4, wherein the device further includes: a geolocation system todetermine the current location of the device for retrieving a list ofnetworks available at the current location of the device.
 8. Anapparatus for a station (STA), the apparatus comprising: transceivercircuitry; and hardware processing circuitry to configure thetransceiver circuitry to: receive a Hotspot 2.0 management object, themanagement object having a hierarchical structure, that includessubscription parameters and policy parameters, wherein the subscriptionparameters further include information for a home service provider ofthe device; detect networks available at a current location of theapparatus, wherein the networks are public Wi-Fi networks; select ahotspot for connecting to a network of the networks available, givingpreference to hotspots operated by the home service provider unless auser preference indicates that preference is not to be given to hotspotsoperated by the home service provider; automatically perform, withoutuser interaction, an extensible authentication protocol (EAP)-basedauthentication, using a credential type provided in the subscriptionparameters, with the selected network of the networks available, whereinpolicy parameters include a roaming partner list that includes apriority for indicating an order of preference for a roaming partnerlist that includes a priority for indicating an order of preference fora roaming partner based on connection information, and wherein when theroaming partner list includes at least two roaming partners, thehardware processing circuitry to select between the at least two roamingpartners based on the priority of each respective roaming partner, andwherein credential data are stored in a separate portion of themanagement object from the roaming partner list; and offload trafficfrom a cellular network to the selected network in response toauthentication of credential data associated with the selected network.9. The apparatus of claim 8, wherein the hardware processing circuitryfurther configures the transceiver circuitry to: retrieve a list ofnetworks available at a current location of the device; and perform anextensible authentication protocol (EAP)-based authentication, usingcredentials as indicated in the subscription parameters, with a selectednetwork of the networks available.
 10. The apparatus of claim 8, whereinthe information for the home service provider includes at least one of afriendly name for the home service provider and a fully-qualified domainname (FQDN) for the home service provider.